When you enable logging on a bucket, the console both enables logging on the source
bucket
and adds a grant in the target bucket's access control list (ACL) granting write permission
to
the Log Delivery group.